
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
File: aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft (raw, json)
Hash identifier: PD3M7ekn56Piu3Q+kZAo4pXqrgfAxvblkimYBBi44a8=
Subject key identifier: 52:F8:39:0F:28:4E:42:36:AE:F7:5B:C7:36:8B:A2:96:65:B0:6B:D1
Authority key identifier: 69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03
Certificate issuer: /CN=A9122B85/serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103
Certificate serial: 01C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
Manifest number: 01BB
Signing time: Wed 25 Mar 2026 03:13:29 +0000
Manifest this update: Wed 25 Mar 2026 03:13:29 +0000
Manifest next update: Wed 01 Apr 2026 03:13:29 +0000
Files and hashes: 1: aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl (hash: 3CMvEU9+bBgEOH3O5utWJxy9kS0WukoljjZYHp9y0fs=)
2: 0287BD068A3D11EEADFABF09C4F9AE02.roa (hash: 0hXjfHbURh148I/8mqPMNcEAW0wUw9merHSuJ0Q2WMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl
rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449 (0x1c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122B85, serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103
Validity
Not Before: Mar 25 03:13:29 2026 GMT
Not After : Apr 1 03:13:29 2026 GMT
Subject: CN=69c352d9-c35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:88:de:95:74:49:c9:f6:2b:9c:5e:9a:2a:b6:
e1:a3:99:35:df:2f:c4:ff:c3:8c:5f:71:32:a2:a4:
34:41:93:a7:70:44:8e:0c:a6:ea:43:4d:54:77:09:
fb:12:47:2c:4d:26:dd:5f:77:3a:ec:31:5c:05:2a:
3a:e4:0c:ce:44:b1:e6:5e:7d:29:0e:37:44:fa:61:
1c:f0:91:2b:c3:7a:d3:2d:ee:e7:5d:c8:17:bc:71:
75:09:2b:43:fa:9d:19:28:83:2e:57:61:38:5c:ca:
2f:b4:6f:c2:60:4c:9f:db:c3:f7:71:83:8c:a7:5c:
9a:a5:6c:46:7e:58:37:66:a0:9b:5b:c9:b7:f6:9a:
e6:d6:51:2a:a7:78:1c:6a:b5:2c:2a:7f:7e:c7:71:
44:86:c7:a6:a3:dc:17:3f:ba:74:1b:a3:f5:32:1f:
ee:56:78:c6:0a:70:64:51:bb:48:cc:eb:d0:51:ca:
75:bb:85:de:21:70:12:e5:1c:88:21:c0:8e:74:25:
32:7a:39:28:f1:b4:5a:d0:2e:0b:3b:50:3c:46:f7:
c8:dc:fa:77:79:c1:18:bd:1b:c8:a8:4a:3d:f0:9b:
74:ec:ee:fe:8d:a6:1d:0c:e9:a0:24:7b:06:ba:ce:
4a:43:4c:af:58:17:7a:0b:5f:8d:2a:ad:6a:7d:77:
2a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F8:39:0F:28:4E:42:36:AE:F7:5B:C7:36:8B:A2:96:65:B0:6B:D1
X509v3 Authority Key Identifier:
keyid:69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d9:8f:f1:ea:42:31:80:50:93:da:3f:d1:87:bf:1f:c5:2e:
a4:19:0e:73:84:33:93:a9:fb:a8:a3:9c:8b:2d:81:de:d6:44:
f2:4d:fb:eb:ca:63:5e:1f:7a:1b:28:92:ef:f2:af:95:ea:1a:
a1:b6:40:19:da:d8:79:fd:87:42:01:43:4c:cb:ce:68:b0:a7:
a5:95:dc:42:0c:c1:4f:0d:b9:93:b3:ce:27:fc:48:7f:cd:6a:
2a:36:54:4a:06:e9:b3:0b:4d:65:02:3a:d5:79:84:bb:e5:e3:
53:9e:c9:99:2a:6d:e1:f8:d8:fc:da:c3:6e:38:6a:ac:6c:87:
fc:8c:d7:2b:20:5b:a9:11:3c:0f:b7:61:8b:d8:43:29:2e:8c:
20:d2:43:fe:63:56:cd:7f:0e:aa:6b:1c:f3:35:d1:77:c5:46:
be:b6:56:1f:1b:cb:74:e0:39:a0:2e:f6:80:46:41:fb:70:21:
42:94:f9:63:b7:95:d8:8c:7d:f1:d6:50:58:5a:c3:24:76:57:
9c:d6:25:d2:81:12:8f:7a:79:d8:bd:a3:33:50:0f:94:8c:70:
cd:8a:27:bc:66:8f:30:e9:dc:5b:4b:42:d5:1c:7a:bf:af:aa:
3c:57:5b:d2:26:2c:bb:19:b0:3d:a4:25:d9:fa:b4:93:68:20:
1a:d2:09:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJCODUxMTAvBgNVBAUTKDY5RUE2MkUzRjAzRTQ3QzAzNzE5QkVEQjE2QjRDQTI3
M0I4QjMxMDMwHhcNMjYwMzI1MDMxMzI5WhcNMjYwNDAxMDMxMzI5WjAYMRYwFAYD
VQQDEw02OWMzNTJkOS1jMzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj4jelXRJyfYrnF6aKrbho5k13y/E/8OMX3EyoqQ0QZOncESODKbqQ01Udwn7
EkcsTSbdX3c67DFcBSo65AzORLHmXn0pDjdE+mEc8JErw3rTLe7nXcgXvHF1CStD
+p0ZKIMuV2E4XMovtG/CYEyf28P3cYOMp1yapWxGflg3ZqCbW8m39prm1lEqp3gc
arUsKn9+x3FEhsemo9wXP7p0G6P1Mh/uVnjGCnBkUbtIzOvQUcp1u4XeIXAS5RyI
IcCOdCUyejko8bRa0C4LO1A8RvfI3Pp3ecEYvRvIqEo98Jt07O7+jaYdDOmgJHsG
us5KQ0yvWBd6C1+NKq1qfXcqOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFL4OQ8o
TkI2rvdbxzaLopZlsGvRMB8GA1UdIwQYMBaAFGnqYuPwPkfANxm+2xa0yic7izED
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkI4NS85MEU5N0Q3MDg5
QkUxMUVFQkNGMjlBNTVDNEY5QUUwMi9hZXBpNF9BLVI4QTNHYjdiRnJUS0p6dUxN
UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FlcGk0X0EtUjhBM0diN2JGclRLSnp1TE1RTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkI4NS85MEU5N0Q3MDg5QkUxMUVFQkNGMjlBNTVDNEY5QUUwMi9hZXBpNF9BLVI4
QTNHYjdiRnJUS0p6dUxNUU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK9mP8epCMYBQk9o/0Ye/H8UupBkOc4Qzk6n7qKOciy2B3tZE8k3768pjXh96
GyiS7/KvleoaobZAGdrYef2HQgFDTMvOaLCnpZXcQgzBTw25k7POJ/xIf81qKjZU
SgbpswtNZQI61XmEu+XjU57JmSpt4fjY/NrDbjhqrGyH/IzXKyBbqRE8D7dhi9hD
KS6MINJD/mNWzX8Oqmsc8zXRd8VGvrZWHxvLdOA5oC72gEZB+3AhQpT5Y7eV2Ix9
8dZQWFrDJHZXnNYl0oESj3p52L2jM1APlIxwzYonvGaPMOncW0tC1Rx6v6+qPFdb
0iYsuxmwPaQl2fq0k2ggGtIJXA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:54:56 2026 by rpki-client